tocsin

Debian/jpeg-xl: high 7.5

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space (up to 256mb is possible, maybe 512mb), potentially exhaus

Action: Upgrade jpeg-xl to 0.7.0-10+deb12u1 or later.

Affected

introducedfixedlast affected
00.7.0-10+deb12u1-

Fixed versions

0.7.0-10+deb12u1

Sources

published · modified · JSON